xl1-patterns
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily documentation-centric, providing architectural guidance and reference code snippets. It does not include executable scripts or automated tools that perform unauthorized or dangerous operations.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, such as API keys or private keys, were found. The documentation for headless verification correctly identifies seed phrases as sensitive data and provides clear instructions on using environment variables for local storage with explicit warnings against exposure.
- [EXTERNAL_DOWNLOADS]: All referenced external packages and network endpoints target official XY Oracle Network repositories and well-known technology services. These resources are consistent with the skill's purpose and the author's identity.
- [PROMPT_INJECTION]: No instructions were found that attempt to override agent behavior, bypass safety guardrails, or extract internal system prompts. The documentation maintains a standard technical and instructional tone.
- [SAFE]: The skill mitigates risks associated with processing untrusted data (Indirect Prompt Injection surface) by enforcing 'Zod-first' validation patterns. This ensures all ingested chain data is verified against strict application schemas before being used in any logic.
Audit Metadata